GSDAQ is an information and education app about the U.S. stock market. This policy explains what we collect, why, where it goes, how long we keep it, and the choices you have. The short version: your conversations stay on your device or browser; we keep only what the service needs to run; we never sell your data or use it for advertising.
Beta applications collect an optional name and email for operator review and a TestFlight invitation. Resend delivers the operator notification. After approval, the name and email are shared with Apple for TestFlight. GSDAQ deletes application records after 30 days; Apple handles TestFlight records under its own privacy policy.
ベータ版への申請では、任意の名前とメールアドレスを運営者が確認します。通知にはResendを使用し、承認後にTestFlightの招待のためAppleへ情報を提供します。GSDAQの申請記録は30日後に削除され、Appleの記録にはAppleのプライバシーポリシーが適用されます。
| Data | When | Why |
|---|---|---|
| Account — Apple or email account identifier, linked provider identifiers, email address (which may be Apple's private relay address), name if you share it, and a salted password verifier if you create a password | When you create an account or sign in with Apple, email and password, an emailed magic link, or an available Google/Kakao login option | Authenticate you, sync settings, attach a paid plan to the correct account, support, and deletion |
| Device identifier — a random ID the app creates on first launch; push notification token if you enable notifications | Always (ID); notifications only if enabled | Daily free-answer limit, delivering the alerts you turn on, error logs, and any credit balance before sign-in |
| Your questions and uploads — chat messages you send, screenshots you choose to upload for portfolio reading, holdings and watchlist symbols you enter | When you send them | Generate the answer or portfolio explanation you asked for; keep the assistant's memory of your preferences (see 3) |
| Financial information you enter — ticker symbols, quantities, average cost | When you add holdings (manually or by screenshot) | Portfolio explanations, position-coach alerts (Pro; Free receives a weekly digest), synced to your account if signed in |
| Subscription and purchase records — Stripe customer and subscription identifiers, plan, billing interval, status and period; Quick/Deep answer-use counts; AI top-up purchase, temporary hold, charge and refund records; legacy App Store transaction records | When you subscribe, manage a plan, buy or approve a top-up, use a paid answer, or have legacy credits | Provide the paid allowance, show and settle the approved maximum charge, prevent duplicate use, and handle cancellation, fraud, accounting, and support |
| Usage and diagnostics — feature-usage events, error messages and stack traces, AI usage metering (tokens, cost) | While you use the app | Fix bugs, keep the service affordable, measure which features are used |
| Website visits — pages viewed on gsdaq.com, the page that referred you, which of our buttons and links you click (for example Open GSDAQ, App Store, Subscribe), approximate country, browser and device type, collected by Google Analytics (see 4). Not collected in the iOS app or the web app. | When you browse gsdaq.com | See which pages and guides are read and where visitors come from |
We do not collect your location (the app declares a location purpose string only because a background-task library requires it; no location API is called), your contacts, your full photo library (we receive only the images you explicitly select), or advertising identifiers. We do not track you across other apps or websites and do not show ads.
Calculations you make in the Personal Finance widgets (net worth, mortgage, debt payoff) stay on your device or browser and are not sent to us.
To answer a question, the app sends your message (and, if attached, your screenshot and holdings) to our server, which forwards it to a third-party language model. GSDAQ selects a supported provider for Free, Quick, or Deep mode. If you connect your own supported API key, you choose that provider. Providers can include OpenAI, Anthropic, or Google. Each processes content under its own terms; we use business/API access, under which OpenAI, Anthropic, and Google state that API content is not used to train their models by default.
Your consent comes first. The app asks for your explicit consent before it sends anything to an AI provider. The consent sheet lists what is sent (your questions and recent conversation context, screenshots you choose to upload, and the holdings and watchlist you keep in the app), who receives it, and the training terms above. You can withdraw consent at any time in Settings → Data & Privacy; AI answers, screenshot reading and coach alerts then stop, and everything else keeps working.
GSDAQ AI processing. Questions may be processed through the Anthropic account used by the GSDAQ AI processing system, under that account’s terms rather than the business API terms above. Queued question text and answers are deleted from our server 2 days after the last activity (normally within about 3 days of asking). After accepting the updated in-app AI consent, screenshots may also be processed through the GSDAQ AI processing system and its Anthropic account. This image path does not place screenshots in a queue, save image files or retain a local session transcript; images are discarded after processing. Older app versions continue to use the API image path. You review extracted holdings before saving them.
Answers are AI-generated and may be inaccurate. They are information and education, not investment advice (see the Terms).
Your chat history is stored on your device. To keep answers consistent, the app sends the assistant a short summary of your recent conversation (for example your experience level, holdings you mentioned, questions you want to follow up). Every few turns our server condenses this into an updated summary and returns it to your device. If you sign in, the summary is stored with your account so it follows you to other devices. You can clear it by deleting the conversation in the app or by deleting your account.
Administrator and support access. Administrator dashboards and the read-only support view show account, plan and basic service status. They do not provide saved portfolios, holding or watchlist counts, ticker lists, quantities, average costs, uploaded screenshots or conversation content. A support view does not sign in as you and cannot use your portfolio API. Support access is time-limited and recorded. Administrator activity and error-log responses exclude free-text payloads and personal routes.
Your portfolio is processed and stored for account synchronization and the features you use. Content you submit for AI processing is handled as described in section 2.
We do not sell personal information and do not share it with data brokers or advertisers. We disclose information only to the processors above, to comply with law, or to protect the safety and integrity of the service.
| Data | Retention |
|---|---|
| Chat messages and screenshots | Not stored on our server after the answer is produced (transient processing only). Questions and answers on the fallback route above (with the device or account identifier, room and language): 2 days after the last activity on the request. Chats stay on your device until you delete them. |
| Support access audit records | 180 days |
| Error logs | 3 days |
| Feature-usage events | 90 days |
| AI token and cost metering | 40 days |
| AI request-cost and budget audit records | Generally up to 400 days |
| Daily free-limit counters | 2 days |
| Magic-link and failed-login records | Generally 15 minutes; a successful magic link is single-use |
| Sign-in sessions | Up to 180 days from issue, or until logout or account deletion |
| Account record, settings, holdings, conversation summary | Until you delete your account |
| Subscription entitlement, answer-use and webhook audit records | While needed to provide the plan and generally up to 400 days after the related period; de-identified or deleted after account deletion |
| Payment, tax, refund, AI top-up, and legacy credit-ledger records | In our database, up to 7 years for tax, accounting, chargeback, and legal obligations; de-identified after account deletion where feasible. Stripe retains its records under its own policy. |
| Company-logo image requests to jsDelivr (web app only) | Nothing is stored by us. jsDelivr receives the request and keeps its own server logs under its own policy; we have no account with it and cannot read or delete those logs. |
| Website analytics (Google Analytics, gsdaq.com only) | Nothing is stored by us. The Google Analytics cookie stays in your browser for up to 2 years unless you delete it; Google keeps the event data for 2 months (the shortest setting Google offers), after which only aggregate reports remain. |
California residents. You have the right to know what personal information we collect and how it is used, to request deletion, to correct inaccurate information, and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioral advertising. To exercise these rights use the in-app deletion or email us. GSDAQ is below the thresholds at which the CCPA applies, but we honor these requests for everyone.
Users outside the United States. GSDAQ is currently offered in the United States. If you use it elsewhere, your data is processed in the United States as described above.
GSDAQ is not directed to children under 13 and we do not knowingly collect personal information from them. If you believe a child has provided us information, email us and we will delete it.
All traffic uses HTTPS. Our AI-provider API keys live only on our server; API keys you connect are stored only on your device or browser and sent for the request. Stripe webhook signatures and current subscription objects are verified before paid access changes, and answer limits use transactional reservations to prevent double use. No system is perfectly secure; if we learn of a breach affecting you, we will notify you as required by law.
We will post changes here and update the effective date. For material changes we will also notify you in the app.
Gwangsu Kim · Los Angeles, California, USA · [email protected]